symfony/symfony — pull request #3865 by robocoder (2012-04-10 20:14:42+00:00)
Title: Check for trusted hosts when generating absolute URL

The Host: request header should be considered untrusted given that Apache lets many characters through.